CVE-2026-21487

iccDEV’s CVE-2026-21487 is a localization/color-management library flaw where versions 2.3.1.1 and earlier suffer an Out-of-bounds Read, Use of Out-of-range Pointer Offset, and Improper Input Validation in CIccProfile::LoadTag. The issue is fixed in version 2.3.1.2. Public sources (NVD/Red Hat an...

CVE-2026-21487 iccDEV has Out-of-bounds Read, Use of Out-of-range Pointer Offset and Improper Input Validation

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below have an Out-of-bounds Read, Use of Out-of-range Pointer Offset and have Improper Input Validation in its CIccProfile::LoadTag function. This issue is fixed in version 2.3.1.2...

CVE-2026-21485 iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are prone to have Undefined Behavior UB and Out of Memory errors. This issue is fixed in version 2.3.1.2...